bitnamilegacy/kafka:3.5.0-debian-11-r0 container image

Docker Hub

Scanned 14 Sept 2026

Deployed by 1 of 17,781 indexed charts (latest versions) at this tag.Docker Hub all tags of bitnamilegacy/kafka

bitnamilegacy/kafka:3.5.0-debian-11-r0 resolved to 8657bb93a581, scanned 14 Sept 2026: 244 findings, 0 critical, 2 on KEV; deployed by 1 chart, among them thingsboard-cluster.

Radar Score

2,7460533206

244 findings on digest 8657bb93a581 · scanned 14 Sept 2026

KEV ×2 confirmed exploited

Radar Score is the sum of every finding’s contribution; the colour is the worst finding’s band.

Digests

1 digest

Tag	Digest	Used by	Last seen	Vulnerabilities	Radar Score
3.5.0-debian-11-r0resolves to	8657bb93a581	1 chart	8 days ago	0533206	2,746

Digests this tag resolved to in indexed charts’ default renders. A tag can move; the digest is what was scanned.

Vulnerabilities

244 distinct on this digest

Findings for digest 8657bb93a581 as scanned on 14 Sept 2026 with syft 1.42.1 for linux/amd64, advisories as of 14 Sept 2026. Other architectures may differ.

Severity	Advisory	Package	Fixed in
High	BIT-kafka-2025-27817	kafka@3.5.0-0	3.9.1
High	BIT-kafka-2025-27817	Apache Kafka@3.5.0	3.9.1
High	GHSA-vgq5-3255-v292	kafka-clients@3.5.0	3.9.1
High	DSA-5514-1KEV	glibc@2.31-13+deb11u6	2.31-13+deb11u7
High	DSA-5570-1KEV	nghttp2@1.43.0-1	1.43.0-1+deb11u1
Medium	DLA-3859-1	systemd@247.3-7+deb11u2	247.3-7+deb11u6
Medium	GO-2024-2687	stdlib@go1.20.5	1.21.9
Medium	DSA-5673-1	glibc@2.31-13+deb11u6	2.31-13+deb11u9
Medium	DLA-3898-1	nghttp2@1.43.0-1	1.43.0-1+deb11u2
Medium	DSA-5523-1	curl@7.74.0-1.3+deb11u7	7.74.0-1.3+deb11u10
Medium	DLA-3942-1	openssl@1.1.1n-0+deb11u5	1.1.1n-0+deb11u6
Medium	DLA-3942-2	openssl@1.1.1n-0+deb11u5	1.1.1w-0+deb11u2
Medium	GHSA-7286-pgfv-vxvh	zookeeper@3.6.4	3.7.2
Medium	GHSA-4g8c-wm8x-jfhw	netty-handler@4.1.92.Final	4.1.118.Final
Medium	BIT-java-2023-25193	java@17.0.7-7-2	11.0.20
Medium	GHSA-qcwq-55hx-v3vh	snappy-java@1.1.10.0	1.1.10.1
Medium	BIT-kafka-2025-27818	kafka@3.5.0-0	3.9.1
Medium	BIT-kafka-2025-27818	Apache Kafka@3.5.0	3.9.1
Medium	GHSA-76qp-h5mr-frr4	kafka_2.12@3.5.0	3.9.1
Medium	GHSA-6mjq-h674-j845	netty-handler@4.1.92.Final	4.1.94.Final
Medium	GHSA-j288-q9x7-2f5v	commons-lang3@3.8.1	3.18.0
Medium	BIT-java-2025-30749	java@17.0.7-7-2	1.8.0
Medium	GHSA-3qp7-7mw8-wx86	netty-handler@4.1.92.Final	4.1.135.Final
Medium	GHSA-355h-qmc2-wpwf	jetty-http@9.4.51.v20230217	9.4.60
Medium	BIT-java-2023-21930	java@17.0.7-7-2	1.8.0
Medium	GHSA-rmj7-2vxq-3g9f	jackson-databind@2.13.5	2.18.8
Medium	GHSA-j3rv-43j4-c7qm	jackson-databind@2.13.5	2.18.8
Medium	BIT-java-2024-21147	java@17.0.7-7-2	1.8.0
Medium	GHSA-55g7-9cwv-5qfv	snappy-java@1.1.10.0	1.1.10.4
Medium	GHSA-h46c-h94j-95f3	jackson-core@2.13.5	2.15.0
Medium	BIT-java-2024-20918	java@17.0.7-7-2	1.8.0
Medium	BIT-java-2024-20952	java@17.0.7-7-2	1.8.0
Medium	BIT-java-2023-21939	java@17.0.7-7-2	1.8.0
Medium	BIT-java-2026-21945	java@17.0.7-7-2	1.8.0
Medium	GHSA-x4gw-5cx5-pgmh	netty-handler@4.1.92.Final	4.1.135.Final
Medium	GHSA-79vv-vp32-gpp7	kafka-metadata@3.5.0	3.6.2
Medium	GHSA-pqr6-cmr2-h8hf	snappy-java@1.1.10.0	1.1.10.1
Medium	GHSA-2x2g-32r7-p4x8	kafka-clients@3.5.0	3.7.1
Low	BIT-java-2025-50106	java@17.0.7-7-2	1.8.0
Low	BIT-java-2025-21587	java@17.0.7-7-2	1.8.0
Low	BIT-java-2025-50059	java@17.0.7-7-2	11.0.28
Low	BIT-java-2024-20932	java@17.0.7-7-2	17.0.10
Low	GHSA-2fvj-hgj9-j2gr	jetty-security@9.4.51.v20230217	9.4.63
Low	BIT-java-2023-21967	java@17.0.7-7-2	1.8.0
Low	GHSA-fjpj-2g6w-x25r	snappy-java@1.1.10.0	1.1.10.1
Low	BIT-java-2026-22016	java@17.0.7-7-2	1.8.0
Low	BIT-java-2023-21954	java@17.0.7-7-2	1.8.0
Low	GHSA-5qcv-4rpc-jp93	kafka-clients@3.5.0	3.9.2
Low	GHSA-6fmv-xxpf-w3cw	plexus-utils@3.3.0	3.6.1
Low	BIT-java-2025-53066	java@17.0.7-7-2	1.8.0

Used by

1 chart

Chart	Version	Tag	Containers
thingsboard-clusterthingsboard-cluster-bettaVerified publisher	0.2.26	3.5.0-debian-11-r0	1

Counts are over the indexed charts’ latest versions, rendered with default values, and say nothing about images outside the indexed set.